Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: eAaclhsLIIGvX2TOR9/5gcOsCmx3g3nK5rDQuQeyhV0=
Subject key identifier: 63:3E:78:B8:02:46:1C:D3:FA:11:01:94:84:D2:AD:23:5E:47:0C:FA
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 01987CE4FB834E86C3F4EC8780383DB08072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0A8C
Signing time: Wed 06 Aug 2025 01:00:38 +0000
Manifest this update: Wed 06 Aug 2025 01:00:38 +0000
Manifest next update: Thu 07 Aug 2025 01:00:38 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: CvxSkza1pWbdARlXsPxdkPZojxYFM1cwLjp5wlpLH6w=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:fb:83:4e:86:c3:f4:ec:87:80:38:3d:b0:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Aug 6 01:00:38 2025 GMT
Not After : Aug 7 01:00:38 2025 GMT
Subject: CN=633e78b802461cd3fa11019484d2ad235e470cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:47:b6:ae:bf:ba:1e:38:01:af:24:61:e0:
7f:fd:e5:8b:b8:12:49:d5:58:3d:19:c3:3d:ec:02:
28:0b:4f:ab:1b:cb:8d:a5:77:e1:1e:65:ec:41:9c:
bb:6a:d1:f6:35:70:07:12:f7:8c:31:52:f3:28:79:
88:b8:8b:b2:24:0c:64:dd:f6:04:93:52:e1:09:a5:
d8:57:09:7c:9c:b9:11:a6:71:f9:75:0f:50:f1:8f:
82:16:8b:93:3f:3e:12:e4:1b:de:5d:d3:b7:12:16:
7f:42:61:31:53:fa:70:88:fe:3b:04:25:cd:ae:04:
e9:fd:a5:ff:e7:a8:e0:0d:f0:a5:1b:9e:fc:39:e8:
fe:71:e5:f0:e0:26:59:f0:89:55:09:7e:82:ef:07:
20:aa:81:bf:84:6d:db:d2:d5:6e:fc:86:c2:23:86:
ba:53:52:79:b9:e6:d5:29:62:2e:2b:89:69:3b:f0:
4d:e1:37:39:b3:14:b9:ae:c4:84:99:36:31:94:ae:
80:ce:22:e9:68:68:81:5f:58:34:4e:64:0b:a7:df:
e4:a1:da:7c:94:8c:e4:11:78:f4:ed:5f:9d:e7:26:
32:ca:b5:b1:ac:99:e0:2d:89:68:69:6a:96:90:ef:
44:84:ce:a9:ff:4a:71:4a:fa:32:cd:59:35:9c:ac:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:78:B8:02:46:1C:D3:FA:11:01:94:84:D2:AD:23:5E:47:0C:FA
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:7a:73:ab:d0:4e:84:92:bc:01:e2:44:37:a0:04:ff:36:
49:4e:16:e5:a7:b8:99:73:95:d6:d0:31:53:1d:9d:f0:75:85:
7c:3f:2e:7b:6b:bc:b7:07:6c:aa:5e:c2:43:55:04:e8:1e:01:
9f:c6:0e:9f:8a:9f:10:c3:b6:8f:35:bc:d5:db:b5:83:fb:d8:
24:08:c5:25:e2:40:9f:f9:cc:ba:ed:fa:16:e7:8d:59:91:d9:
1e:0c:4b:3e:fc:8a:da:8f:0f:e1:1d:38:31:69:08:36:0f:6f:
13:eb:a6:56:99:8e:ed:3f:22:63:0b:9b:c0:fa:41:08:44:e1:
ea:62:20:bc:a9:10:9e:d9:b5:9d:a5:ea:ec:70:6a:9d:15:cd:
4c:d3:e6:6e:61:97:11:fd:8b:55:58:66:94:fc:c8:f9:f7:65:
83:07:c7:14:57:39:cc:55:ee:5b:c1:32:3d:f8:37:2e:09:71:
23:34:80:17:96:fb:81:8c:10:41:16:4e:06:e3:bd:77:40:eb:
86:d4:7e:c6:78:21:7c:fd:b0:4f:8a:8e:dc:cd:a2:4a:90:32:
f4:dd:ce:fd:f1:21:97:ca:a0:c3:0c:73:19:87:db:74:fc:a0:
18:35:97:ad:67:5c:92:07:2b:5c:b2:d9:d7:8a:fb:75:f5:48:
27:08:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:49 2025 by rpki-client